[jboss-jira] [JBoss JIRA] (WFLY-7831) Coverity: default platform encoding used in TokenRealmDefinition (Elytron subsystem)

Darran Lofthouse (JIRA) issues at jboss.org
Thu Jan 19 16:52:00 EST 2017


     [ https://issues.jboss.org/browse/WFLY-7831?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse updated WFLY-7831:
-----------------------------------
    Fix Version/s: 11.0.0.Alpha1


> Coverity: default platform encoding used in TokenRealmDefinition (Elytron subsystem)
> ------------------------------------------------------------------------------------
>
>                 Key: WFLY-7831
>                 URL: https://issues.jboss.org/browse/WFLY-7831
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>            Reporter: Josef Cacek
>            Assignee: Ilia Vassilev
>            Priority: Minor
>              Labels: static_analysis
>             Fix For: 11.0.0.Alpha1
>
>
> Coverity static-analysis scan found a String to byte conversion with default platform encoding in the {{TokenRealmDefinition.performRuntime}} method.
> https://scan7.coverity.com/reports.htm#v16159/p12663/fileInstanceId=6892114&defectInstanceId=1794526&mergedDefectId=1388485&eventId=1794526-0
> Following code
> {code:java}
> jwtValidatorBuilder.publicKey(publicKey.getBytes());
> {code}
> The encoding should be specified as argument.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list